Make the payload with a unique delim

Iterate through all elements in doc and match them up against the element found during xpathing

Create the vuln item

Return the opposite quote of the one give, single for double or double for single

HTML tag attributes that allow javascript TAKEN OUT AT THE MOMENT

Goes through char by char to determine if double or single quotes are open or not: True/None

Returns the obj as either True or None

Make sure we're not just repeating the same URL XSS over and over

Get the url domain, protocol, and netloc using urlparse

Return the most likely field names for username and password

Return the form most likely to be a login form

lxml cannot determine the order of attrs which is important if we're using regex to find the location of the inj so this func finds t

Returns a list of complete parameters, each with 1 parameter changed to an XSS vector

Combine lxml injection data with the 2 regex injection search data

Remove commented JS lines which screw with quote detection

Parse out the URL parameters

Return the first quote in the string which should always be the html quote if this is called on a string of html with an attr

Returns either None if no breakout chars were found or a list of sets of potential breakout characters

Make a list of lists of tuples where each secondary list has 1 payloaded param and the rest are original value

Pull out just the unfiltered chars from the reflected chars payload = delim+fuzz+delim+;9

Create the URL parameter payloaded URLs

Generate payloaded cookie header requests

Payload each form input in each input's own request

Generate header requests

Grab the <iframe src=...> attribute and add those URLs to the queue should they be within the start_url domain

Make the URL requests

Find all tags with attributes that contain the subbed str

Parse the xpath comment search findings

The main response parsing function, called on every response from a new URL Checks for XSS in headers and url

Creates injection points for the xpath that finds the payload in any html enclosed text

Payload the end of the URL to catch some DOM(?) and other reflected XSSes

Payload the URL path like: http://example.com/page1.php?x=1&y=2 --> http://example.com/page1.php/FUZZ/?x=1&y=2

Do a quick lookup in the response body for SQL errors. Both w3af's and DSSS.py's methods are in here but sectoolsmarket.com shows DSSS as hav

Returns the value for the submit input, if any

Searches lxml doc for any text, attributes, or comments that reflect the subbed text

XSS logic. Returns None if vulnerability not found The breakout_chars var is a list(set()). This ensure we can test for breakout giv

Prevent the item from being printed to output during debugging

Prevent the item from being printed to output during debugging

Check that the username showed up in the response page

Check for the special chars and append them to a master list of tuples, one tuple per injection point Always returns a string

Fill out the login form and return the request

Creates the XSS tester requests for the start URL as well as the request for robots.txt

Payload the URL variables

Parse the robots.txt file and create Requests for the disallowed domains

If user and pw args are given, pass the first response to the login handler otherwise pass it to the normal callback function

Unescape the various payload encodings (html and url encodings)

Find which chars, if any, are filtered